General

  • Target

    JaffaCakes118_a56a702c70e6c8cece4ebf6a0d3fdd91

  • Size

    779KB

  • Sample

    250108-xa15bsykdz

  • MD5

    a56a702c70e6c8cece4ebf6a0d3fdd91

  • SHA1

    999ce42cd8f4e99c27cad0032ab28471ce5df062

  • SHA256

    03bea9fdfe1d571c694e64128a5d7f20497e14d95bb589d8b0efb9bf876ac0c6

  • SHA512

    1aa2f400e58e6cb08993e3227523f869ff2a9b1811fa351f4dfc5dd4e86addfcfbf005ffefb78f1fdb3d5743fb07d760cb809e1687dc7d41bb5d331779088093

  • SSDEEP

    12288:BMjSBD67XNcsA6eQviq6CYpoo1TDolAxvD/DC5C4XSiyyjK:BlBDepkQipBV2Av657Xd8

Malware Config

Targets

    • Target

      JaffaCakes118_a56a702c70e6c8cece4ebf6a0d3fdd91

    • Size

      779KB

    • MD5

      a56a702c70e6c8cece4ebf6a0d3fdd91

    • SHA1

      999ce42cd8f4e99c27cad0032ab28471ce5df062

    • SHA256

      03bea9fdfe1d571c694e64128a5d7f20497e14d95bb589d8b0efb9bf876ac0c6

    • SHA512

      1aa2f400e58e6cb08993e3227523f869ff2a9b1811fa351f4dfc5dd4e86addfcfbf005ffefb78f1fdb3d5743fb07d760cb809e1687dc7d41bb5d331779088093

    • SSDEEP

      12288:BMjSBD67XNcsA6eQviq6CYpoo1TDolAxvD/DC5C4XSiyyjK:BlBDepkQipBV2Av657Xd8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks